Computer system and backup method therefor

ABSTRACT

A computer system includes a first volume that is read and written from a first computer and in which write data is written, a second volume that stores journal data in the first volume with the journal data delimited at each predetermined point, a third volume as a virtual volume, a virtual-volume creating unit that creates, when a backup instruction for the first volume at a predetermined point is received, the third volume from which a second computer can read the journal data and in which the second computer can write the journal data, a mapping unit that maps the journal data to the third volume, and a backup unit that transfers the write data to a storage device via the second computer or transfers, through the third volume to which the journal data is mapped by the mapping unit, the journal data to the storage device via the second computer and backs up the write data and the journal data.

CROSS REFERENCES TO RELATED APPLICATIONS

This application relates to and claims priority from Japanese PatentApplication No. 2008-218584, field on Aug. 27, 2008, the entiredisclosure of which is incorporated herein by reference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a computer system and a backup methodtherefor and is suitably applied to, for example, a computer system thatcarries out backup of a volume that stores write data.

2. Description of the Related Art

Conventionally, for example, a snapshot function and a journal functionare known as functions of a storage system.

The snapshot function is a function of storing an image of a logicalvolume at a certain point (e.g., a point when a snapshot acquisitionrequest is received from a host computer). The storage system canintermittently acquire replication (backup) of data in the logicalvolume by periodically executing the snapshot function. When thesnapshot function is used, the storage system can restore the logicalvolume at a point when a snapshot is acquired.

The journal function is a function of generating, in writing write datain a logical volume designated by a write command from the hostcomputer, data (journal data) including the write data and controlinformation concerning the writing of the write data and storing thegenerated journal data in a journal volume.

JP-A-2005-18738 discloses recovery processing executed, by writingjournal data stored in a journal volume in a snapshot acquired by thesnapshot function, at points other than a point when a snapshot iscreated. JP-A-2007-80131 discloses switching of a snapshot and ajournal. JP-A-2007-133471 discloses operation of a restore volume for asnapshot.

SUMMARY OF THE INVENTION

In general, a backup server cannot recognize, as a target logicalvolume, a journal volume in which journal data is stored. The backupserver can recognize only a normal logical volume and a replica volumeof the logical volume. The journal volume in which the journal data isstored is data of an original format for accessing in a storage system.A tape device in the past usually stores data in file units or logicalvolume units.

As described above, the backup server cannot recognize the journalvolume in which the journal data is stored. The journal volume cannot bestored in the tape device. Therefore, when a large amount of journaldata is secured, it is likely that a capacity of a physical storagedevice in the storage system becomes insufficient.

The present invention has been devised in view of the points describedabove and it is an object of the present invention to provide a computersystem and a backup method therefor that can markedly improve operationefficiency for a physical storage device.

In order to solve such a problem, the present invention provides acomputer system including a first computer, a second computer, a storagedevice, and a storage system. The storage system includes a first volumethat is read and written from the first computer and in which write datais written, a second volume that stores journal data in the first volumewith the journal data delimited at each predetermined point, a thirdvolume as a virtual volume, a virtual-volume creating unit that creates,when a backup instruction for the first volume at a predetermined pointtransmitted from the first computer is received, the third volume fromwhich the second computer can read the journal data and in which thesecond computer can write the journal data, a mapping unit that maps thejournal data to the third volume created by the virtual-volume creatingunit, and a backup unit that transfers the write data to the storagedevice via the second computer or transfers, through the third volume towhich the journal data is mapped by the mapping unit, the journal datato the storage device via the second computer and backs up the writedata and the journal data.

Further, the preset invention provides a computer system including afirst computer, a second computer, a storage device, and a storagesystem. The storage system includes a first volume that is independentlyformed in the storage system and stores first data that cannot be readand written from the first computer and the second computer, a secondvolume as a virtual volume, a virtual-volume creating unit that createsthe second volume from which the second computer can read the first dataand in which the second computer can write the first data, a mappingunit that maps the first data to the second volume, and a backup unitthat backs up the first data in the storage device via the secondcomputer.

Moreover, the present invention provides a backup method for a computersystem including a first computer, a second computer, a storage device,and a storage system. The storage system includes a first volume that isread and written from the first computer and in which write data iswritten, a second volume that stores journal data in the first volumewith the journal data delimited at each predetermined point, and a thirdvolume as a virtual volume. The backup method includes a first step ofthe storage system creating, when a backup instruction for the firstvolume at a predetermined point transmitted from the first computer isreceived, the third volume from which the second computer can read thejournal data and in which the second computer can write the journaldata, a second step of the storage system mapping the journal data tothe third volume created in the first step, and a third step of thestorage system transferring the write data to the storage device via thesecond computer or transferring, through the third volume to which thejournal data is mapped in the second step, the journal data to thestorage device via the second computer and backing up the write data andthe journal data.

Therefore, even if the storage device has a configuration same as thatin the past, the second computer can recognize the second volume inwhich the journal data is stored. The journal data can be written in thestorage device via the second computer. Therefore, when a large amountof journal data is secured, it is possible to effectively prevent acapacity of a physical storage device in the storage system frombecoming insufficient.

According to the present invention, it is possible to realize a computersystem and a backup method therefor that can markedly improve operationefficiency for a physical storage device.

DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram of a computer system according to the presentinvention;

FIG. 2 is a diagram of programs of a storage system;

FIG. 3 is a diagram of a device configuration information table;

FIG. 4 is a diagram of a logical unit information table;

FIG. 5 is a diagram of a P-VOL configuration information table, ajournal information table, a V-VOL mapping table, and a journal controlinformation table;

FIG. 6 is a diagram of a journal information table;

FIG. 7 is a diagram of a V-VOL header information table;

FIG. 8 is a diagram of programs of a management server;

FIG. 9 is a diagram of catalog management information;

FIG. 10 is a diagram of an example of a backup schedule;

FIG. 11 is a schematic diagram of journal data storage of the computersystem;

FIG. 12 is a flowchart of journal acquisition processing;

FIG. 13 is a flowchart of the journal acquisition processing;

FIG. 14 is a schematic diagram of backup processing;

FIG. 15 is a flowchart of full-volume backup processing;

FIG. 16 is a flowchart of journal data backup processing;

FIG. 17 is a flowchart of the journal data backup processing;

FIG. 18 is a flowchart of the journal data backup processing;

FIG. 19 is a flowchart of backup processing in a designated generation;

FIG. 20 is a diagram of V-VOLs;

FIG. 21 is a diagram of restore processing;

FIG. 22 is a flowchart of journal restore processing;

FIG. 23 is a flowchart of merge processing; and

FIG. 24 is a diagram of the merge processing.

DETAILED DESCRIPTION OF THE INVENTION

An embodiment of the present invention is explained in detail withreference to the accompanying drawings. The present invention is notlimited by the embodiment.

(1) Configuration of a Computer System

FIG. 1 is a diagram of a configuration of a computer system 1 accordingto this embodiment. The computer system 1 is configured by connecting ahost computer 2, a management server 3, a storage system 4, a backupserver 5, and a tape device 6 via first to third networks 7 to 9.

One or more host computers 2 and one or more storage systems 4 areconnected to the first network 7. One or more backup servers 5 and oneor more tape devices 6 are connected to the second network 8. The tapedevice 6 may be any kind as long as the tape device 6 is a storagedevice including a VTL (Virtual Tape Library) and an inexpensive HDD(Hard Disk Drive) or a storage device such as a storage system at aremote copy destination placed on the outside of the storage system 4.

One or more host computers 2, one or more management servers 3, and oneor more storage systems 4 are connected to the third network 9.Arbitrary kinds of networks can be adopted as the first to thirdnetworks 7 to 9, respectively. For example, the first network 7 and thesecond network 8 are SANs (Storage Area Networks) and the third network9 is a LAN (Local Area Network).

The host computer 2 is a computer that accesses a logical volumeprovided by the storage system 4. The host computer 2 includes a CPU(Central Processing Unit) 11, a memory 12, an auxiliary storage device13, an input unit (e.g., a keyboard and a pointing device) 14, an outputunit (e.g., a display device) 15, a storage adapter (e.g., a host busadapter) 16 connected to the first network 7, and a network adapter 17connected to the third network 9.

The CPU 11 transmits an I/O command (a write command or a read command),which designates an address, via the storage adapter 16.

The management server 3 is a computer that manages the host computer 2,the storage system 4, the backup server 5, and the tape device 6connected to the third network 9. The management server 3 includes a CPU(Central Processing Unit) 21, a memory 22, an auxiliary storage device23, an input unit (e.g., a keyboard and a pointing device) 24, an outputunit (e.g., a display device) 25, and a network adapter 26 connected tothe third network 9.

The CPU 21 transmits predetermined commands to the host computer 2, thestorage system 4, the backup server 5, and the tape device 6 via thenetwork adapter 26. The memory 22 is a memory that stores computerprograms and information shown in FIG. 8.

The storage system 4 has a controller 31 and a storage device group 32.The controller 31 includes, for example, plural front-end interfaces 33,plural back-end interfaces 34, a first internal network 35, one or morecache memories 36, one or more control memories 37, and one or morecontrol processors 38. The storage device group 32 includes pluralphysical storage devices (hereinafter referred to as “PDEVs”) 39.

The front-end interfaces 33 are interface circuits for communicatingwith the host computer 2, the backup server 5, and the tape device 6 onthe outside of the storage system 4. Therefore, as the front-endinterfaces 33, there are an interface connected to the first network 7and an interface connected to the second network 8. Each of thefront-end interfaces 33 includes, for example, a port 41 connected tothe first network 7 or the second network 8, a memory 42, and a localrouter (hereinafter referred to as “LR”) 43.

The port 41 and the memory 42 are connected to the LR 43. The LR 43performs distribution for processing data received via the port 41 in anarbitrary control processor 38. Specifically, for example, the controlprocessor 38 sets an I/O command for designating a certain address inthe LR 43 to be carried out in the control processor 38. The LR 43distributes the I/O command and the data according to the setting.

The back-end interfaces 34 are interface circuits for communicating withthe PDEVs 39. Each of the back-end interfaces 34 includes, for example,a disk interface 44 connected to the PDEVs 39, a memory 45, and an LR46. The disk interface 44 and the memory 45 are connected to the LR 46.

The first internal network 35 includes, for example, a switch (e.g., across-bus switch) or a bus. The plural front-end interfaces 33, theplural back-end interfaces 34, the one or more cache memories 36, theone or more control memories 37, and the one or more control processors38 are connected to the first internal network 35. Communication amongthese components is performed via the first internal network 35.

The cache memories 36 are memories that temporarily store data read outfrom the host computer 2 or written in the host computer 2 according toan I/O command.

The control memories 37 are memories that store various computerprograms and/or various kinds of information (e.g., computer programsand information shown in FIG. 2). For example, information indicatingwhich P-VOL (a logical volume used on-line between the storage system 4and the host computer 2) is a logical volume accessed from which hostcomputer 2. The control processors 38 can specify, from thisinformation, which P-VOL is a logical volume related to which hostcomputer 2.

As described later, when the storage system 4 receives a host write sizeconcerning a certain host computer 2, the control processors 38 canspecify a P-VOL related to the host computer 2 referring to theinformation stored in the control memories 37 and set a host write sizefor a specified P-VOL 81. The control processors 38 perform processingdescribed later by executing the various computer programs stored in thecontrol memories 37.

The PDEVs 39 are nonvolatile storage devices and are, for example, harddisk drives or flash memory devices. A RAID group as a PDEV groupconforming to the rules of RAID (Redundant Array of Independent Disks)is configured by two or more PDEVs 39. One or plural logical volumes(LUs: Logical Units) are set on the RAID group.

A second internal network (e.g., a LAN) 47 is connected to the front-endinterfaces 33, the back-end interfaces 34, the cache memories 36, thecontrol memories 37, and the control processors 38, which are thecomponents of the controller 31. A user input/output apparatus 48 isconnected to the second internal network 47.

The user input/output apparatus 48 is a computer that is also connectedto the third network 9 and maintains or manages the storage system 4. Acustomer engineer can define various kinds of information stored in thecontrol memories 37 by, for example, operating the user input/outputapparatus 48 (or the management server 3 that can communicate with theuser input/output apparatus 48).

The tape device 6 receives data from the backup server 5 and backs upthe data or reads out data and transmits the data to the backup server5.

In the following explanation, a logical volume may be abbreviated as“VOL” and the term “write” may be abbreviated as “WR”.

FIG. 2 is a diagram of the computer programs and the information storedin the control memory 37. In the following explanation, processingdescribed as being performed by a program is actually processingperformed by the control processors 38 that execute the program.

An R/W program 51, a CoW (copy on Write) program 52, a journal (JNL)backup program 53, a V-VOL (described later) creation program 54, aV-VOL-journal mapping management program 55, a journal restore program56, and a journal merge program 57 are stored in the control memory 37.A device configuration information table 58, a logical unit informationtable 59, a P-VOL configuration information table 60, a journalinformation table 61, a V-VOL mapping table 62, a journal informationtable 63, and a V-VOL header information table 64 are also stored in thecontrol memory 37. The control memory 37 includes a system area (notshown).

The R/W program 51 controls I/O conforming to an I/O command from thehost computer 2. The journal backup program 53 is a program forestablishing an environment for backing up journal data in the tapedevice 6. The journal restore program 56 is a program for restoring thejournal data, which is backed up in the tape device 6, as a logicalvolume of a designated generation in the storage system 4. The journalmerge program 57 is a program for merging inter-generation differentialdata (described later) of plural generations. Details of the programsand the information stored in the control memory 37 are explained later.

FIG. 3 is a diagram of an example of the device configurationinformation table 58 shown in FIG. 2. The device configurationinformation table 58 is a table prepared for each of P-VOLs 81(described later). A device #, a state, presence or absence of a path,connection host information, a capacity, and an attribute for each ofthe P-VOLs 81 are recorded in the device configuration information table58.

The “device #” is a number for specifying a logical volume. The “state”is information on a state of the logical volume, for example, accessrestriction state such as R/W unavailable and only R available. The“presence or absence of a path” is information on whether an access pathto a host computer is defined. The “connection host information” isinformation on a type of the host computer and is, for example, Windows(registered trademark), AIX, and a host write size. The “capacity” isinformation on a capacity of the logical volume. The “attribute” isinformation on whether the logical volume is a normal logical volume ora virtual volume.

FIG. 4 is a diagram of an example of the logical unit information table59 shown in FIG. 2. The logical unit information table 59 is a tableprepared in logical units (LUs) for input and output by the hostcomputer 2. In the logical unit information table 59, a port #, a device#, and an LUN for each of the logical units are recorded.

The “port #” is a number of a port allocated to a target devicecorresponding to a logical volume. The “device #” is a number forspecifying the PDEV 39. The “LUN” is a number of the logical unit (LUN:Logical Unit Number) and is an identifier for identifying the logicalunit.

FIG. 5 is a diagram of examples of the P-VOL configuration informationtable 60, the journal information table 61, and the V-VOL mapping table62 shown in FIG. 2. In FIG. 5, a journal control information table 65not shown in FIG. 2 and journal data managed in the journal controlinformation table 65 are shown. The journal control information table 65and the journal data are not stored in the control memory 37 but arestored in the storage device group 32 (in an example described later, astorage pool).

The P-VOL configuration information table 60 is a table prepared for alogical volume, an attribute of which is normal, in the deviceconfiguration information table 58. A device #, a JNLG #, and a journalinformation table starting address are recorded in the P-VOLconfiguration information table 60.

The “device #” is a number for specifying the PDEV 39. The “JNLG #” is anumber of a journal group. Generations of journal data (or logicalvolumes) having the same JNLG are switched at the same timing. The“journal information table starting address” is a starting address ofthe journal information table 61.

The journal information table 61 is a table for managinginter-generation differential data prepared for each of P-VOLs andcorresponding to the P-VOL. Concerning the inter-generation differentialdata, a starting address, length, and creation time are recorded foreach of generations.

The “starting address” is a starting address of the journal controlinformation table 65. The “length” is a data size and the number ofelements of the generation in the inter-generation differential data.The “creation time” is time when a difference of the generation isstored (e.g., reception time of a marker that causes decision of alatest generation).

Similarly, concerning merge differential data (described later), astarting address, length, and creation time are recorded for each ofgenerations.

The “generation” is a certain generation (e.g., a latest or oldestgeneration) among plural generations corresponding to the mergedifferential data. The “creation time” is time when merge differentialdata corresponding thereto is stored in a journal data storage area. Thestorage system 4 can refer to, by referring to the “starting address”corresponding to journal data, the journal control information 65corresponding to the journal data.

The journal control information table 65 is present in each of thegenerations for each of the inter-generation differential data and themerge differential data. The journal control information table 65 is atable for managing a differential BM (Bitmap) corresponding to thegeneration and a location of a data element. Specifically, for example,a device #, length, a differential BM, and a data storage address arerecorded in the journal control information table 65.

The “device #” is a number of a P-VOL corresponding thereto. The“length” is the length of journal data corresponding thereto (theinter-generation differential data or the merge differential data). The“differential BM” is a differential BM corresponding to the generation.The “data storage address” is an address corresponding to each ofjournal data elements forming the journal data.

The V-VOL mapping table 62 is a table for each of V-VOLs (backup volumesfor P-VOLs) and is a table for managing, in order to backup journaldata, information of which generation is mapped to the V-VOL. A V-VOL #and a journal generation starting address are recorded in the V-VOLmapping table. The “V-VOL #” is a number for specifying a V-VOL. The“journal generation starting address” is an address in which informationof a generation as a backup target is stored.

FIG. 6 is a diagram of an example of the journal information table 63shown in FIG. 2. The journal information table 63 is a table preparedfor each of the P-VOLs and used for managing backup data concerning theP-VOL. For example, a P-VOL #, snapshot acquisition time, and backupacquisition time are recorded in the journal information table 63.

The “P-VOL #” is a number for specifying a P-VOL. The “snapshotacquisition time” is time when an S-VOL forming a pair with the P-VOL iscreated. The “backup acquisition time” is date and time when a backup isacquired (i.e., date and time of marker reception that causes decisionof the generation).

Besides, although not shown in FIG. 6, the number of acquisitiongenerations that is the number of generations of backups for the P-VOL,a backup period, the number of merge generations indicating how manygenerations of inter-generation differential data should be accumulatedto execute merge processing, and the like are recorded.

FIG. 7 is a diagram of an example of the V-VOL header information table64 shown in FIG. 2. The V-VOL header information table 64 is informationon a logical volume created to read out journal data from the backupserver 5 when journal data is backed up in the tape device 6.

A V-VOL is a virtual volume and has no entity. When an access to theV-VOL is necessary, the storage system 4 maps journal data correspondingto information registered in the V-VOL header information table 64 tothe V-VOL and realizes the access to the V-VOL. In realizing the access,V-VOL header information is created and registered in the V-VOL headerinformation table 64 in advance. The V-VOL header information for eachof host operating systems (OSs) of the backup servers 5 are registeredin the V-VOL header information table 64.

The host operating system and OS-dependent header area information arerecorded in the V-VOL header information table 64. The “host operatingsystem” is an identifier indicating a type of the operating system ofthe backup server 5. The “OS-dependent header area information” is V-VOLheader information. The V-VOL header information may be stored in thecontrol memory 37 or may be stored in the PDEV 39.

FIG. 8 is a diagram of the computer programs and the information storedin the memory 22 of the management server 3.

A catalog management program 71, a backup schedule program 72, catalogmanagement information 73, and schedule management information 74 arestored in the memory 22.

The backup schedule program 72 registers a schedule of backup made up bya user in advance in the schedule management information 74 of themanagement server 3. The management server 3 transmits a backupinstruction to the backup server 5 as scheduled. The catalog managementinformation 73 is updated at an opportunity when the backup server 5backs up data from the storage system 4 to the tape device 6 or restoresthe data from the tape device 6 to the storage system 4.

FIG. 9 is a diagram of an example of the catalog management information73 shown in FIG. 8. The catalog management information 73 is informationfor managing which data is stored in which device. The catalogmanagement information 73 manages a backup generation number stored inthe tape device 6 and a generation number in the storage system 4.

Generation numbers are not always the same in the storage system 4 andthe tape device 6. Therefore, in returning journal data from the tapedevice 6 to the storage system 4 and restoring a volume of a certaingeneration, the management server 3 restores the volume after matchingthe generation with the generation number in the storage system 4. Inbacking up data from the storage system 4 to the tape device 6, themanagement server 3 stores a target P-VOL # stored in the storage system4.

The catalog management information 73 records from which backup server 5to which tape device 6 data is stored. A P-VOL #, a storage systemnumber, a generation number in a storage system, a generation number ina tape device, a backup server number, a tape device number, and backupacquisition time are recorded in the catalog management information 73.

The “P-VOL #” is a number for specifying a P-VOL that is an originallogical volume to be backed up. The “storage system number” is anidentifier such as a serial number of a device at a backup source. The“generation number in a storage system” is a generation number withwhich journal data as a backup target is managed in the storage system4. The “generation number in a tape device” is a generation number inthe tape device 6 of data as a backup target. The “backup server number”is an identifier such as a serial number of the backup server 5 thatexecutes backup processing. The “tape device number” is an identifiersuch as a serial number of a device at a destination in which thejournal data is backed up. The “backup acquisition time” is time whenthe backup processing is started.

FIG. 10 is a diagram of an example of a backup schedule. In thisschedule, the tape device 6 acquires full-volume backup (backup of alldata of the P-VOLs) every Sunday. Journal data, which is differentialdata from the previous day is backed up in the tape device 6 (journaldata backup) in units of one day from Monday to Saturday. The storagesystem 4 monitors a journal amount in the storage system 4 and judgeswhether the journal data should be moved. When the journal data ismoved, the storage system 4 schedules which journal data is moved andwhere the journal data is moved to. The host computer 2 transmits a“snapshot instruction (full-volume backup instruction)” when full-volumebackup is executed. The host computer 2 transmits a “marker instruction(journal data backup instruction)” when journal data backup is executed.When the storage system 4 receives these instructions, the generation isswitched.

In the schedule shown in FIG. 10, a snapshot is acquired on Sunday andthe journal data is backed up in the tape device 6 by using thesnapshot. In the schedule shown in FIG. 10, only journal data is backedup in the tape device 6 on the days other than Sunday. When journal datais acquired on Sunday separately from the snapshot acquired on Sundayand a new snapshot is acquired on the next Sunday, it is possible todelete the snapshot acquired last time.

(2) Overview of Storage of Journal Data

FIG. 11 is a diagram of an overview of storage of journal data. Thestorage system 4 has the P-VOLs 81 and a JNL-VOL 82.

The P-VOLs 81 are primary logical volumes (online logical volumes). Thestorage system 4 writes write data (WR data) transmitted from the hostcomputer 2 in the P-VOLs 81 to update the P-VOLs 81. The JNL-VOL 82 is alogical volume in which a journal is written. The storage system 4writes journal data in the JNL-VOL 82 to update the JNL-VOL 82.

A journal related area 83 is a storage area not provided to the hostcomputer 2. The journal related area 83 is present in a storage pool(not shown). The storage pool includes plural pool areas. According towriting of journal data, an area is allocated to the journal data fromthe storage pool and the writing target data is written in the area.

The journal related area 83 includes a journal control informationstorage area 84 and a journal data storage area 85. As shown in FIG. 11,a differential BM (BM is an abbreviation of “Bitmap”) 86 correspondingto each of decided generations is stored in the journal controlinformation storage area 84. Inter-generation differential data 87corresponding to each of the decided generations is stored in thejournal data storage area 85.

The “generation” means a certain point concerning the P-VOLs 81. Forexample, a generation (N) means the time when a predetermined generationdeciding event occurs concerning the P-VOLs 81 after a generation (N−1)passes (in this embodiment, the time when a journal data backupinstruction is received from the host computer 2). In an example shownin FIG. 11, since a decided latest generation is the generation (N), anundecided generation is a generation (N+1). When a journal data backupinstruction is received, the generation (N) is switched to the newgeneration (N+1). When the generation is switched, the storage system 4adds an entry for the generation of the inter-generation differentialdata 87 in the journal information table 61.

The “differential BM” is a bitmap representing a difference betweengenerations of a logical volume. Specifically, for example, in theexample shown in FIG. 11, the differential BM 86 corresponding to thegeneration (N) is a bitmap representing a difference between the P-VOL81 of the generation (N) and the P-VOL 81 of the generation (N−1). Whena write data element is written in a block in the P-VOLs 81 for thefirst time at a point after the generation (N−1), the storage system 4sets a bit corresponding to the block (a bit in the differential BM 86corresponding to the generation (N)) ON (i.e., updates the bit to avalue representing occurrence of write (e.g., “1”)) and stores adifferential data element corresponding to the write data element in thejournal data storage area 85. Respective bits forming the differentialBMs 86 correspond to respective blocks of the P-VOLs 81. The “host writesize” is a unit size of data (size of a write data element) written fromthe host computer 2. In this example, the respective generationscorrespond to, for example, “journal on Monday” and “journal onTuesday”.

The “inter-generation differential data” is a set of inter-generationdifferential data elements. The “inter-generation differential dataelement” is a data element saved from the P-VOLs 81 because the dataelement is written in the P-VOLs 81. Specifically, for example, when anundecided generation is the generation (N), the generation (N) isdecided and the undecided generation is changed to (N+1) when thestorage system 4 receives a marker instruction (specific electronicdata) from the host computer 2. In that case, the inter-generationdifferential data 87 (i.e., data corresponding to a difference betweenthe P-VOL 81 of the generation (N) and the P-VOL 81 of the generation(N−1)) accumulated in the journal data storage area 85 is changed to animmediately preceding generation. The storage system 4 saves theinter-generation differential data 87 in the journal data storage area85 as an inter-generation differential data element.

In this way, the storage system 4 accumulates the inter-generationdifferential data 87 corresponding to the generation (N−1) (i.e., datacorresponding to a difference between the generation (N−1) and ageneration (N−2)) in the journal data storage area 85.

(3) Journal Data Acquiring Method

There are two methods of acquiring journal data. A method of usuallyupdating data in the P-VOLs 81 and storing the updated data in theJNL-VOL 82 as journal data when a marker instruction is received (FIG.12) and a method of storing the data before update in the JNL-VOL 82 asjournal data (FIG. 13) are explained.

FIG. 12 is a diagram of an overview of write processing (After JNL) forwriting a write data element in the P-VOLs 81. In the explanation ofFIG. 12, the P-VOL 81 designated by a write command is referred to as“target P-VOL 81”. In the following explanation, to prevent redundancyin explanation, a target corresponding to a generation “K” may berepresented with (K) attached to the end of a name of the target.Specifically, for example, journal control information corresponding toa generation (j) may be represented as “journal control information(j)”.

First, the front-end interface 33 receives a write command from the hostcomputer 2 (S1) and transfers the write command to the controlprocessors 38. Subsequently, the R/W program 51 (see FIG. 2) secures aslot from the cache memory 36 in response to the reception of the writecommand (S2). The “slot” is a unit management area of the cache memory36. A size of the slot is, for example, larger than a host write size.

Subsequently, the R/W program 51 reports the completion of the writecommand to the host computer 2 at a transmission source of the writecommand (S3). When a write data element is transmitted from the hostcomputer 2 in response to the report, the R/W program 51 stores thewrite data element in the memory 42 in the front-end interface 33 (S4).

The R/W program 51 writes the write data element stored in the memory 42of the front-end interface 33 in the slot of the cache memory 36 (S5).The R/W program 51 asynchronously writes the write data element, whichis written in the slot of the cache memory 36, in a write destinationblock in the target P-VOL 81 (S6). The R/W program 51 changes a bitcorresponding to an updated location among bits of the differential BMof the target P-VOL 81 to ON (S7).

On the other hand, the host computer 2 transmits a marker instruction tothe target P-VOL 81 at different timing. The R/W program 51 receives themarker instruction (S8), creates the JNL-VOL 82, and updates the journalcontrol information table 65 (S9).

The R/W program 51 copies write data (journal data) in a section of thetarget P-VOL 81 where a differential bit is ON to the journal datastorage area 85. In copying the write data, before copying the writedata to the journal data storage area 85, the R/W program 51 secures anarea from the journal data storage area 85 and manages an address of thearea. When the creation of the JNL-VOL 82 is completed, the R/W program51 transmits a report on completion of creation of the JNL-VOL 82 to thehost computer 2 (S10).

When the host write size is not set yet, the R/W program 51 creates, forexample, a write data element in a size of the slot as an initial value.

FIG. 13 is a diagram of an overview of write processing (Before JNL) forwriting a write data element in the target P-VOL 81 in this embodiment.

First, the R/W program 51 receives a write command from the hostcomputer 2 (S11) and secures a slot for storing a write data element inthe cache memory 36 (S12). The R/W program 51 refers to a bitcorresponding to a write destination block designated by the writecommand in the differential BM 86 corresponding to a data element beforeupdate (write data presently stored in the P-VOL 81) (S13).

When a reference destination is an ON bit as a result of S13, the R/Wprogram 51 executes S18 and subsequent steps without writing the dataelement before update in the JNL-VOL 82 (S14). The R/W program 51 doesnot save a data element stored in the write destination block in theJNL-VOL 82 as the data element before update.

On the other hand, when the reference destination is an OFF bit as aresult of S13, the R/W program 51 specifies, referring to the journalcontrol information table 65 corresponding to the target P-VOL (a P-VOLdesignated by the write command) 81, a free segment in the journalrelated area 83 corresponding to the data element before update for thetarget P-VOL 81 (S15). If there is no free segment in the journal datastorage area 85, the R/W program 51 can secure the journal data storagearea 85 anew.

After S15, the R/W program 51 saves the data element before update,which is stored in the write destination block, in the specified freesegment (S16). The R/W program 51 updates the journal controlinformation table 65 corresponding to online update differential data(S17). Specifically, the R/W program 51 changes the bit corresponding tothe write destination block (the OFF bit at the reference destination inthe differential BM) to ON and adds an address representing the freesegment as a data storage address corresponding to the write destinationblock.

Thereafter, the R/W program 51 writes the write data element, which isstored in the memory 42 in the front-end interface 33, in the slot ofthe cache memory 36 secured in S12 (S18).

The R/W program 51 writes the write data element, which is written inthe slot, in the write destination block in the target P-VOL 81 (S19).In the following explanation, a method of storing data before update asjournal data is mainly explained. A method of storing updated data asjournal data can be processed in the same manner.

(4) Backup Processing

FIG. 14 is a diagram of an overview of the backup processing.

First, the management server 3 transmits a backup instruction to thebackup server 5 (S21). Subsequently, the backup server 5 transmits abackup request to the host computer 2 (S22). The host computer 2 stopsan application (not shown) and transmits the backup instruction to thestorage system 4 (S23). The host computer 2 transmits a snapshotinstruction in the case of full-volume backup and transmits a markerinstruction in the case of journal data backup.

Subsequently, the management server 3 recognizes where the P-VOL 81 usedby the application of the host computer 2 is present (S24). The storagesystem 4 receives a full-volume backup instruction from the hostcomputer 2, divides the P-VOL 81 as a backup target, creates a snapshot,and separates a backup generation (S25). The storage system 4 receives ajournal data backup instruction, creates V-VOLs 88 in a format that thetape device 6 can recognize, allocates journal data to the V-VOLs 88 foreach of the generations, and performs backup of the journal data (S26).

FIG. 15 is a diagram of a flowchart of the full-volume backupprocessing.

First, when a backup instruction from the user and a generation numberto be backed up or time of a logical volume to be backed up areinputted, the management server 3 transmits the backup instruction to astorage system agent program of the host computer 2 (S31).

Subsequently, the host computer 2 transmits a full-volume backupinstruction to the storage system 4 (S32). The storage system 4 starts afull-volume backup program (not shown) (S33). The storage system 4splits a logical volume (the P-VOL 81) as a backup target and creates asnapshot (or a replica) (S34). In acquiring the snapshot, the storagesystem 4 may acquire the snapshot using the V-VOL 88 as a virtual volumeor may acquire the snapshot using another virtual volume different fromthe V-VOL 88.

At a point when the snapshot creation is finished (S35), the generationis switched and the storage system 4 updates the journal informationtable 61 (S36). The storage system 4 notifies the host computer 2 of alogical volume number of the acquired snapshot that the host computer 2can recognize (S37). The host computer 2 notifies the backup server 5 ofthe received logical volume number at the snapshot destination andtransmits a backup instruction (S38).

The backup server 5 issues a read request for a snapshot volumecorresponding to the received logical volume number of the snapshot tothe storage system 4 (S39). The storage system 4 reads out data from thesnapshot volume and transfers the data to the backup server 5 (S40). Thebackup server 5 transfers the data read from the storage system 4 to thetape device 6 (S41). The tape device 6 stores the received data (S42).

The backup server 5 reports the end of the backup to the managementserver 3 at a point when the data transfer to the tape device 6 isfinished (S43). The management server 3 creates the catalog managementinformation 73 concerning the carried-out backup and manages the catalogmanagement information 73 (S44).

FIG. 16 is a flowchart of the journal data backup processing.

First, when a backup instruction from the user and a generation numberto be backed up or time of a logical volume to be backed up areinputted, the management server 3 transmits the backup instruction tothe storage system agent program of the host computer 2 (S51). Thebackup schedule program 72 of the management server 3 may judge thatjournal data is moved, determine which journal data (data of whichgeneration) is moved and where the journal data is moved to, andtransmit an instruction.

Subsequently, the host computer 2 transmits a journal data backupinstruction to the storage system 4 (S52). The storage system 4 startsthe journal backup program 53 (S53). The storage system 4 searcheswhether the V-VOLs 88 for backing up a journal are already created inthe system (S54). When the V-VOLs 88 are already created (S54: YES), thestorage system 4 proceeds to S55. On the other hand, when the V-VOLs 88are not created (S54: NO), the storage system 4 proceeds to S58.

The storage system 4 searches for the V-VOL 88 not in use among theV-VOLs 88 already created (S55). When there is the V-VOL 88 not in useamong the V-VOLs 88 already created (S55: YES), the storage system 4proceeds to S59. On the other hand, when there is no free V-VOL 88 (S55:NO), the storage system 4 judges whether the V-VOL 88 should beadditionally created (S56).

When the V-VOL 88 is additionally created (S56: YES), the storage system4 proceeds to S58. On the other hand, when the V-VOL 88 is notadditionally created (S56: NO), the storage system 4 waits for the freeV-VOL 88 (S57). In order to periodically check whether there is the freeV-VOL 88, the storage system 4 executes processing for returning to S55and loops steps S55 to S57 when predetermined time elapses.

When the V-VOL 88 is created, the storage system 4 starts the V-VOLcreation program 54 (S58). Details of the program are described later.

After the V-VOL 88 is created, the storage system 4 maps journal data asa backup target to the V-VOL 88 (S59) and updates the V-VOL mappingtable 62. The storage system 4 notifies the host computer 2 of a V-VOLnumber to which the journal data to be backed up is mapped (S60). Thehost computer 2 notifies the backup server 5 of the received V-VOLnumber and transmits a backup instruction to the backup server 5 (S61).

The backup server 5 issues a read request for the V-VOL 88 correspondingto the received V-VOL number to the storage system 4. The backup server5 accesses an LUN, a V-VOL number of which is the device # of thelogical unit information table 59 (S62). The storage system 4 reads outdata from the V-VOL 88 (the JNL-VOL 82) and transfers the data to thebackup server 5 (S63). The backup server 5 transfers the data read fromthe storage system 4 to the tape device 6 (S64). The tape device 6stores the received data (S65).

Journal data is stored in the tape device 6 in V-VOL 88 units. Headerinformation added when the V-VOL 88 is created is also stored. The tapedevice 6 may write, at timing of storage in the tape device 6,information such as a generation number, storage time, a journal groupnumber (a group identifier for simultaneously changing generations ofplural JNL-VOLs 82), the order, and the like of the journal data. Thesekinds of information may be stored by both the tape device 6 and themanagement server 3.

The backup server 5 reports the end of the backup to the managementserver 3 at a point when the data transfer to the tape device 6 isfinished (S66). The management server 3 creates the catalog managementinformation 73 concerning the carried-out backup information and managesthe catalog management information 73 (S67).

The processing shown in FIG. 16 is processing in a configuration inwhich the management server 3 performs catalog management and stores thecatalog management information 73. In the present invention, theprocessing can be performed in the same manner even when the storagesystem 4 stores the catalog management information 73 (FIG. 17) and whenthe backup server 5 stores the catalog management information 73 (FIG.18).

FIG. 17 is a flowchart of the journal data backup processing performedwhen the storage system 4 stores the catalog management information 73.

First, the storage system 4 monitors a journal data amount in thestorage system 4 itself and judges whether backup for the P-VOL 81should be performed (S71). An opportunity for the judgment may be everyunit time determined in advance or may be the time when the journal dataamount increases. A criterion for the judgment may be whether thejournal data amount exceeds a threshold amount determined in advance ormay be a ratio of the journal data amount to a total capacity availablefor data storage. When it is judged that the backup for the P-VOL 81 isperformed, the storage system 4 determines which journal data is backedup and where the journal data is backed up (S71).

Steps S72 to S78 are the same as steps S53 to S59.

Subsequently, the storage system 4 causes the host computer 2 totransmit a backup instruction (an instruction for movement of thejournal data to the tape device 6). The host computer 2 transmits aV-VOL number to which the journal data as a backup target is allocatedand a number of the tape device 6 that backs up the journal data (S80).

Steps S81 to S84 are the same as steps S62 to S65.

The backup server 5 reports the end of the backup to the host computer 2at a point when the data transfer to the tape device 6 is finished(S85). The host computer 2 notifies the storage system 4 of the end ofthe backup (S86). The host computer 2 creates the catalog managementinformation 73 concerning the carried-out backup information and managesthe catalog management information 73 (S87).

FIG. 18 is a flowchart of processing performed when the backup server 5stores the catalog management information 73.

First, the backup server 5 monitors a journal data amount and judgeswhether backup for the P-VOL 81 should be performed. A method of thejudgment may be the same as the method adopted when the storage system 4manages the catalog management information 73. Since the backup server 5stores the catalog management information 73, the backup server 5 mayjudge, from the catalog management information 73, whether the P-VOL 81should be updated. The management server 3 and the storage system 4 mayperiodically transmit the journal data amount and the backup server 5may judge, according to the transmitted journal data amount, whetherbackup for the P-VOL 81 should be performed. When it is judged that thebackup for the P-VOL 81 is performed, the backup server 5 determineswhich journal data is backed up and where the journal data is backed up(S91).

Steps S92 to S105 are the same as steps S52 to S65.

Subsequently, the backup server 5 updates the catalog managementinformation 73 (S106) and notifies the host computer 2 of the end of thebackup (S107).

FIG. 19 is a flowchart of processing for backing up designated time or ageneration at an arbitrary point.

When time or a generation of data to be backed up is inputted from theuser, the management server 3 transmits a backup instruction to thestorage system agent program of the host computer 2 (S111).Subsequently, the host computer 2 transmits a full-volume backupinstruction to the storage system 4 (S112).

Subsequently, the storage system 4 performs the full-volume backupprocessing shown in FIG. 15. The storage system 4 acquires a snapshot ofthe P-VOL 81 presently used for a job. The backup server 5 reads outdata of a volume of the snapshot and transfers the data to the tapedevice 6.

The storage system 4 performs the journal data backup processing shownin FIG. 16 in order to acquire journal data of a generation to be backedup. The storage system 4 creates the V-VOLs 88 and maps an address ofthe journal data storage area 83 of a generation desired to be backed upto the V-VOLs 88. The backup server 5 reads out data from the journaldata storage area 83 and transfers the data to the tape device 6.

As described above, the computer system 1 performs the backup operationand performs the backup of journal data.

FIG. 20 is a diagram of a configuration of the V-VOLs 88 and an image ofmapping to the V-VOLs 88. Header information at volume tops of theV-VOLs 88 is stored in a storage area of the V-VOL header informationtable 64. The V-VOL creation program 54 links header area information ofthe V-VOLs 88 for the operating system of the backup server 5 to accessthe V-VOLs 88. When the backup server 5 receives an access request tothe V-VOLs 88, the backup server 5 allows the storage system 4 side toautomatically map header area information of the operating systemcorresponding to volume starting areas of the V-VOLs 88 and executeaccess to the V-VOLs 88.

Journal control information and journal data of generations requested tobe backed up are mapped to the portions of journal information storageareas of the V-VOLs 88. However, a data target is stored in the journaldata storage area 85. Therefore, the storage system 4 searches for,during an access, an address registered in the V-VOL mapping table 62,reads out journal data corresponding to the address, and transfers thejournal data to the backup server 5.

The V-VOLs 88 are mapped in association with each of generationsrequested to be backed up.

The storage system 4 may create the V-VOLs 88 at an opportunity of aninstruction of backup or may create the V-VOLs 88 in advance. Thestorage system 4 maps the journal control information and the journaldata to the portions of the journal information storage areas of theV-VOLs 88. When a backup instruction is received, the storage system 4can map plural generations with one V-VOL 88 by mounting generationscorresponding to the backup instruction. Therefore, the storage system 4manages the V-VOL 88 such that the V-VOL 88 is usually in aninaccessible state and can be accessed when a P-VOL #, a backupacquisition generation #, and a generation differential data storagestarting address of a backup source are mapped to the V-VOL mappingtable 62.

In this embodiment, the instruction for backup is indicated by theprocessing inputted from the management server 3. However, in aconfiguration in which the management server 3 is not present, the usermay input a backup request to the backup server 5 and start the backupprocessing (the backup processing is the same). In that case, the userdesignates a backup generation or time desired to be acquired.

One V-VOL 88 changes a mode of the host computer 2 to thereby changemapping of the V-VOL 88 and OS-dependent header area information andallow the V-VOL 88 to cope with various operating systems. For example,the V-VOL 88 can be the V-VOL 88 that is accessed from an operatingsystem “A” in some case and can be the V-VOL 88 that is accessed from anoperating system “B” in another case.

In this way, since the journal data as the differential information andthe data of the update portion is data independently created in thestorage system 4, the backup server 5 usually does not recognize thejournal data. Therefore, in the computer system 1, a function forallowing the backup server 5 to recognize and read out the journal datais provided in the storage system 4. Hierarchical management forshifting journal data in an old generation with a low frequency of useto a low-cost storage device on the outside is performed to back up alogical volume designated by the user.

(5) Restore Processing

FIG. 21 is a diagram of an overview of the restore processing.

First, when a restore instruction is transmitted from the managementserver 3 (S121), the backup server 5 transmits a restore request to thehost computer 2. Subsequently, the host computer 2 halts an applicationand transmits the restore instruction to the storage system 4 (S123).The management server 3 recognizes, for example, where the V-VOL 88 usedby the application of the host computer 2 is present (S124).

When the restore instruction is received from the host computer 2, thestorage system 4 secures a volume for restore (a restore volume) 89(S125). The storage system 4 secures the V-VOL 88 for journal datarestore and the journal data storage area 85 (S126).

When it is informed that the storage system 4 is ready, the backupserver 5 starts transfer of data of a full volume and journal data ofthe tape device 6 to the storage system 4 (S127). The storage system 4restores a logical volume of a generation designated by the user fromthe received data of the full volume and Journal data (S128).

FIG. 22 is a flowchart of the restore processing for restoring journaldata.

First, when a restore instruction from the user and a generation numberto be restored or time for restore are inputted, the management server 3transmits the restore instruction to the storage system agent program ofthe host computer 2 (S131). Subsequently, the host computer 2 transmitsthe restore instruction to the storage system 4 (S132). The storagesystem 4 starts the journal restore program 56 (S133).

Subsequently, the storage system 4 secures, from free volumes, therestore volume 89 for restoring a logical volume backed up from the tapedevice 6 by the full-volume backup processing (S134). The storage system4 searches whether the V-VOLs 88 for restoring journal data are alreadycreated (S135) When the V-VOLs 88 are already created (S135: YES), thestorage system 4 proceeds to S139. On the other hand, when the V-VOLs 88are not created (S135: NO), the storage system 4 proceeds to S136.

The storage system 4 searches for the V-VOL 88 not in use among theV-VOLs 88 already created (S136). When there is the V-VOL 88 not in useamong the V-VOLs 88 already created (S136: YES), the storage system 4proceeds to S139. On the other hand, when there is no free V-VOL 88(S136: NO), the storage system 4 judges whether the V-VOL 88 should beadditionally created (S137).

When the V-VOL 88 is additionally created (S137: YES), the storagesystem 4 proceeds to S139. On the other hand, when the V-VOL 88 is notadditionally created (S137: NO), the storage system 4 waits for the freeV-VOL 88 (S138). In order to periodically check whether there is thefree V-VOL 88, the storage system 4 executes processing for returning toS136 and loops steps S136 to S138 when predetermined time elapses.

When the V-VOL 88 is created, the storage system 4 starts the V-VOLcreation program 54 (S139).

After the V-VOL 88 is created, the storage system 4 prepares the journaldata storage area 85 for storing journal data to be restored and mapsthe journal data storing area 85 and updates the V-VOL mapping table 62(S140). When a report to the effect that restore preparation iscompleted is received from the storage system 4, the management server 3checks in which tape device 6 a restore instruction request from theuser is stored and transmits a restore instruction to the backup server5 (S141). The backup server 5 transmits a transfer instruction to thetape device 6 at a restore source (S142).

The tape device 6 transfers target data to the backup server 5 (S143).The backup server 5 transmits a write request to the storage system 4 inorder to store data read from the tape device 6 in the storage system 4(S144). At this point, the backup server 5 is notified of a securedwrite destination from the storage system 4 (may be notified through thehost computer 2).

The storage system 4 receives data transmitted to the storage system 4itself and stores the data in the secured place (S145). At this point,the storage system 4 stores, together with the write data, information(a generation, acquisition time, and the like of a journal) added whenthe journal data is written in the tape device 6 in the control memory37 in the storage system 4. When the reception of the write data isfinished, the storage system 4 transmits an end report to the managementserver 3.

The management server 3 transmits a restoration instruction for therestore volume 89 to the storage system 4 (S146). The storage system 4recognizes, from the information stored in S145 and the catalogmanagement information 73 managed by the management server 3, journaldata of which full volume (the restore volume 89) the restored journaldata is (to which full volume the journal data should be updated). Thestorage system 4 overwrites the restored data of the V-VOL 88 on thefull volume (the restore volume 89), reflects the journal data on therestore volume 89, and restores the restore volume 89 to content of ageneration, restoration of which is instructed by the user (S147). Themanagement server 3 creates the catalog management information 73concerning the carried-out restore information and manages the catalogmanagement information 73 (S148).

In this way, in the computer system 1, the journal data shifted to theoutside of the storage system 4 is shifted to the storage system 4 againto restore a logical volume designated by the user.

(6) Merge of Differences

As explained with reference to FIGS. 23 and 24 later, theinter-generation differential data 87 and the differential BMs 86 forplural generations can be merged. Consequently, in the computer system1, a consumed storage capacity can be reduced. In the followingexplanation, the inter-generation differential data 87 after the mergeis referred to as “merge differential data”.

FIG. 23 is a flowchart of processing for merging the inter-generationdifferential data 87. FIG. 24 is a diagram of movement of data elementsrelated to the merge processing. The merge processing is explained belowwith reference to FIGS. 23 and 24.

When it is detected that the inter-generation differential data 87 for acertain number of generations (e.g., (m+1) generations (a generation (N)to a generation (N+m)) is stored, the journal merge program 57 (see FIG.2) starts merge processing for converting inter-generation differentialdata for (m+1) generations into the merge differential data 87(described later). As an opportunity for starting the merge processing,the detection of the storage of the inter-generation differential data87 for (m+1) generations is only an example. The merge processing may bestarted at other opportunities, for example, when a predetermined periodelapses from the immediately preceding merge processing.

First, the journal merge program 57 changes a “state” (not shown) of thegeneration (N) to the generation (N+m) as a merge target to “beingmerged” in the journal information table 61. The journal merge program57 selects the inter-generation differential data 87 of the oldestgeneration (N) in the merge target as a target (S151).

Subsequently, the journal merge program 57 determines a starting bit ofthe differential BM 86 (N) corresponding to the target inter-generationdifferential data 87 as a reference position (S152).

The journal merge program 57 searches for a bit set as the referenceposition for the differential BM 86 (N) (S153) When the bit is ON (S153:YES), the journal merge program 57 proceeds to S154. When the bit is OFF(S153: NO), the journal merge program 57 proceeds to S159. In theexplanation of FIGS. 23 and 24 below, the bit set as the referenceposition is referred to as “target bit”. When the bit is ON, the bit isreferred to as “target ON bit”. When the bit is OFF, the bit is referredto as “target OFF bit”.

Concerning the differential BM 86 corresponding to the mergedifferential data 87 created this time (referred to as “mergedifferential BM” in the explanation of the FIGS. 23 and 24 below), thejournal merge program 57 searches for a bit in the same position as thetarget bit (S154). When the target bit is OFF (S154: YES), the journalmerge program 57 proceeds to S155. When the target bit is ON (S154: ON),the journal merge program 57 proceeds to S159.

The journal merge program 57 searches for a data storage address of thejournal data storage area 85 of the inter-generation differential data87 corresponding to the target ON bit in the differential BM 86 (N)(S155) and specifies the address (S156). The journal merge program 57copies (overwrites) the inter-generation differential data 87 stored ina segment indicated by the address from the segment to (on) a segment inthe journal data storage area 85 corresponding to the merge differentialdata 87 created this time (the next segment of an immediately precedingsegment at a copy destination) (S157). The journal merge program 57changes a bit in the same position as the target bit in the mergedifferential BM 86 to ON (S158).

The journal merge program 57 searches for a bit not referred to yet in aposition next to the reference position in the differential BM 86 (N)(S154). When the bit is present (S159: YES), the journal merge program57 changes the next bit as a reference position (S160) and proceeds toS153. On the other hand, when the bit not referred to yet is not presentin the next position (S159: NO), the journal merge program 57 finishesthe processing for the generation (N) (S161) and searches whether thenext generation is present (S162). When the next generation is present(S162: YES), the journal merge program 57 proceeds to S151 and selectsthe inter-generation differential data 87 of the next generation (N+1)as a target. On the other hand, when the next generation is not present(i.e., the immediately preceding processed generation is (N+m)) (S162:NO), the journal merge program 57 finishes the merge processing.

According to the flow described above, as shown in FIG. 24, the storagesystem 4 processes the inter-generation differential data 87corresponding to an old generation among the generations (N) to (N+m) ofthe merge target earlier. When a bit is an ON bit in the differential BM86 corresponding to the inter-generation differential data 87 and a bitcorresponding to the ON bit is OFF in the merge differential BM 86, thestorage system 4 copies the inter-generation differential data 87corresponding to the ON bit to the journal data storage area 85corresponding to the merge differential data 87. On the other hand, whena bit is an ON bit in the differential BM 86 corresponding to theinter-generation differential data 87 and a bit corresponding to the ONbit is also ON in the merge differential BM 86, the storage system 4does not copy a data element corresponding to the ON bit in thedifferential BM 86 corresponding to the inter-generation differentialdata 87.

In short, the storage system 4 more preferentially copies theinter-generation differential data 87 corresponding to an oldergeneration to the journal data storage area 85 corresponding to themerge differential data 87. Specifically, for example, as shown in FIG.24, concerning two generations, the generation (N) and the generation(N+m), elements “A”, and “G” of the inter-generation differential data87 corresponding to a starting block of the P-VOL 81 are present. Inthis case, as described above, an inter-generation differential dataelement corresponding to an older generation is given higher priority.Therefore, the storage system 4 copies the element “A” for thegeneration (N) to the journal data storage area 85 corresponding to themerge differential data 87 but does not copy the element “G” for thegeneration newer than the generation (N) to the journal data storagearea 85.

In this merge processing, an old generation is processed earlier.However, a new generation may be processed earlier. In this case, when abit is an ON bit in the differential BM 86 corresponding tointer-generation differential data and a bit corresponding to the ON bitis also ON in the merge differential BM 86, the storage system 4 mayoverwrite data corresponding to the ON bit in the differential BM 86corresponding to the inter-generation differential data 87 on the mergedifferential data 87 corresponding to the ON bit stored in the journaldata storage area 85 corresponding to the merge differential data 87.When the merge differential data 87 is created, the storage system 4 maydelete the inter-generation differential data 87 for plural generations,which are the basis of the merge differential data 87, immediately afterthe completion of the creation of the merge differential data 87 or inresponse to an instruction from a computer (e.g., the host computer 2 orthe management server 3).

The storage system 4 may delete the inter-generation differential data87 and the merge differential data 87 from an old generation. In thiscase, the storage system 4 opens, for example, according to a not-shownjournal deletion program, the journal control information table 64 andjournal data corresponding to a generation to be deleted and manages anopened area as a free area. The journal deletion program deletes anentry corresponding to the generation from the P-VOL configurationinformation table 60 and the journal information table 61.

As described above, the storage system 4 can merge differences and,then, back up data in the tape device 6.

In this way, in the computer system 1, the storage system 4 provides thefunction for allowing the backup server 5 to recognize journal data.

In other words, the storage system 4 generates a virtual volume (theV-VOL 8) corresponding to a volume of the journal data. Subsequently, inorder to cause the backup server 5 to recognize the V-VOL 88, thestorage system 4 sets header information original to the V-VOL 88 at thetop of the V-VOL 88. The header information is different depending on atype of the operating system of the backup server 5.

The storage system 4 associates the journal data with the generatedV-VOL 88. Specifically, the user designates a generation (or time) to bebacked up and the storage system 4 searches for a position where journaldata corresponding to the generation is stored and maps the position tothe V-VOL 88. The backup server 5 reads out the journal data from theV-VOL 88 of the storage system 4, stores the read-out journal data inthe tape device 6, and backs up the journal data.

In the computer system 1, the storage system 4 provides the function ofrestoring the backed-up journal data. The storage system 4 returns,according to a restore instruction from the management server 3, thejournal data stored in the tape device 6 into the storage system 4 usingthe V-VOL 88 and restores a logical volume based on the restoreinstruction.

Therefore, the backup server 5 can directly read out the journal dataitself and store the journal data in the tape device 6. The backupserver 5 can transmit the journal data stored in the tape device 6 tothe storage system 4. The storage system 4 can access the journal dataitself.

Consequently, in the computer system 1, since the technique for thebackup server 5 to read out the journal data from the storage system 4is generalized, it is possible to back up the journal data itself in aperipheral device (the tape device 6, etc.) on the outside of thestorage system 4.

In this embodiment, the JNL-VOL 82 in which journal data is stored as avolume that the backup server 5 cannot recognize is described. However,the present invention is not limited to this. The present invention canbe applied to information of an original format in the storage system 4except the JNL-VOL 82 in which the journal data is stored. Examples ofthe information of the original format include differential data of asnapshot and stored data of a volume that dynamically expands a storagearea (thin provisioning). It is necessary to generate a storage pool inthe storage system 4 and write these data in the storage pool.Therefore, the data are the information of the original format in thestorage system 4 and cannot be recognized from an external storagedevice such as the backup server 5.

In this embodiment, as a method of selecting journal data to be moved,it is also possible to select a method of moving the journal data inorder from one with a lowest frequency of use (access frequency), movingthe journal data in order from one with earliest creation time, andmoving the journal data form one designated by the user.

Moreover, in this embodiment, as an opportunity for moving the journaldata, the journal data may be moved when a total volume of the PDEV 39in use in the storage system 4 increases to be larger than a presetvalue when journal data with an access frequency lower than a frequencyset in advance is generated, or when the user designate the movement ofthe journal data.

The present invention can be widely applied to storage devices thatcarry out backup of logical volumes in which data is stored.

1. A computer system comprising: a first computer; a second computer; astorage device; and a storage system, wherein the storage systemincludes: a first volume that is read and written from the firstcomputer and in which write data is written; a second volume that storesjournal data in the first volume with the journal data delimited at eachpredetermined point; a third volume as a virtual volume; avirtual-volume creating unit that creates, when a backup instruction forthe first volume at a predetermined point transmitted from the firstcomputer is received, the third volume from which the second computercan read the journal data and in which the second computer can write thejournal data; a mapping unit that maps the journal data to the thirdvolume created by the virtual-volume creating unit; and a backup unitthat transfers the write data to the storage device via the secondcomputer or transfers, through the third volume to which the journaldata is mapped by the mapping unit, the journal data to the storagedevice via the second computer and backs up the write data and thejournal data.
 2. The computer system according to claim 1, wherein thevirtual-volume creating unit creates the third volume according to atype of an operating system of the second computer, and the secondcomputer accesses the second volume via the third volume created by thevirtual-volume creating unit.
 3. The computer system according to claim1, further comprising a third computer that manages the first computer,the second computer, and the storage system, wherein the third computerhas management information for managing a storage device number of thestorage device in which the journal data of the second volume and thewrite data of the first volume are stored.
 4. The computer systemaccording to claim 1, wherein the storage system has managementinformation for managing a storage device number of the storage devicein which the journal data of the second volume and the write data of thefirst volume are stored.
 5. The computer system according to claim 1,wherein the second computer has management information for managing astorage device number of the storage device in which the journal data ofthe second volume and the write data of the first volume are stored. 6.The computer system according to claim 1, wherein the storage systemuses the third volume for each of types of operating systems of aplurality of the second computers.
 7. The computer system according toclaim 1, wherein the storage system maps the journal data to one of aplurality of the third volumes which is corresponding to one operatingsystem of second computer being in use.
 8. The computer system accordingto claim 1, wherein the storage system includes: a fourth volume forrestore; and a restore unit that restores the first volume at thepredetermined point, the virtual-volume creating unit creates the thirdvolume when a restore instruction for the first volume at thepredetermined point is received from the first computer, when therestore instruction is received, the restore unit creates the fourthvolume, secures, in the second volume, an area for storing the journaldata received through the third volume, receives the data and thejournal data from the storage device, stores the data in the fourthvolume, stores the journal data in the second volume, and reflects thejournal data on the fourth volume to thereby restore the first volume atthe predetermined point.
 9. A computer system comprising: a firstcomputer; a second computer; a storage device; and a storage system,wherein the storage system includes: a first volume that isindependently formed in the storage system and stores first data thatcannot be read and written from the first computer and the secondcomputer; a second volume as a virtual volume; a virtual-volume creatingunit that creates the second volume from which the second computer canread the first data and in which the second computer can write the firstdata; a mapping unit that maps the first data to the second volume; anda backup unit that backs up the first data in the storage device via thesecond computer.
 10. A backup method for a computer system including afirst computer, a second computer, a storage device, and a storagesystem, the storage system including a first volume that is read andwritten from the first computer and in which write data is written, asecond volume that stores journal data in the first volume with thejournal data delimited at each predetermined point, and a third volumeas a virtual volume, the backup method comprising: a first step of thestorage system creating, when a backup instruction for the first volumeat a predetermined point transmitted from the first computer isreceived, the third volume from which the second computer can read thejournal data and in which the second computer can write the journaldata; a second step of the storage system mapping the journal data tothe third volume created in the first step; and a third step of thestorage system transferring the write data to the storage device via thesecond computer or transferring, through the third volume to which thejournal data is mapped in the second step, the journal data to thestorage device via the second computer and backing up the write data andthe journal data.
 11. The backup method for a computer system accordingto claim 10, wherein in the first step, the storage system creates thethird volume according to a type of an operating system of the secondcomputer, and the second computer accesses the second volume via thethird volume created in the first step.
 12. The backup method for acomputer system according to claim 10, wherein the computer systemfurther includes a third computer that manages the first computer, thesecond computer, and the storage system, and the third computer hasmanagement information for managing a storage device number of thestorage device in which the journal data of the second volume and thewrite data of the first volume are stored.
 13. The backup method for acomputer system according to claim 10, wherein the storage system hasmanagement information for managing a storage device number of thestorage device in which the journal data of the second volume and thewrite data of the first volume are stored.
 14. The backup method for acomputer system according to claim 10, wherein the second computer hasmanagement information for managing a storage device number of thestorage device in which the journal data of the second volume and thewrite data of the first volume are stored.
 15. The backup method for acomputer system according to claim 10, wherein the storage system mapsthe journal data corresponding to the operating system of a plurality ofthe second computers in use to the third volume and uses the journaldata.
 16. The backup method for a computer system according to claim 10,wherein the storage system maps the journal data to one of a pluralityof the third volumes which is corresponding to one operating system ofsaid second computer being in use.
 17. The backup method for a computersystem according to claim 10, wherein the storage system includes afourth volume for restore, the backup method further includes a fourthstep of the storage system restoring the first volume at thepredetermined point, in the first step, the storage system creates thethird volume when a restore instruction for the first volume at thepredetermined point is received from the first computer, in the fourthstep, when the restore instruction is received, the storage systemcreates the fourth volume, secures an area for storing the journal datareceived through the third volume in the second volume, receives thedata and the journal data from the storage device, stores the data inthe fourth volume, stores the journal data in the second volume, andreflects the journal data on the fourth volume to thereby restore thefirst volume at the predetermined point.